Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/ASqzBERb-U9auCTou0q0irDXq3A.roa
File: ASqzBERb-U9auCTou0q0irDXq3A.roa (raw, json)
Hash identifier: rsgPqxtqSJ+XJ6UREjUoqqj3LGsRjexwx+403rntcrY=
Subject key identifier: 01:2A:B3:04:44:5B:F9:4F:5A:B8:24:E8:BB:4A:B4:8A:B0:D7:AB:70
Certificate issuer: /CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Certificate serial: 018D13D7F3749D4221A51B11421713BD8C40
Authority key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/ASqzBERb-U9auCTou0q0irDXq3A.roa
Signing time: Tue 16 Jan 2024 19:55:36 +0000
ROA not before: Tue 16 Jan 2024 19:55:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.112.0/24 maxlen: 24
195.96.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f3:74:9d:42:21:a5:1b:11:42:17:13:bd:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Validity
Not Before: Jan 16 19:55:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=012ab304445bf94f5ab824e8bb4ab48ab0d7ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a9:bd:cb:98:63:3a:dc:79:31:09:d6:cd:cb:
b5:a3:64:8d:fb:1e:2a:48:35:8e:eb:f8:43:4c:fd:
a8:d3:43:c5:c8:f7:c8:6a:c6:13:e6:3e:ea:50:94:
c3:f5:dc:83:a3:79:4e:b3:24:31:f1:31:d6:0c:12:
c1:d1:85:7a:71:29:da:40:15:d0:f5:3d:0b:d5:e1:
49:02:2b:6f:64:b8:79:4a:b9:43:50:f4:7b:00:86:
cb:39:3e:e4:f2:07:f6:c1:db:6a:ad:5e:ed:14:b1:
fa:f2:57:0e:14:0d:80:d8:32:37:91:08:25:7a:78:
35:d5:48:1b:87:0a:94:b0:d0:95:fb:50:92:6f:19:
a9:23:99:c8:a3:fe:8f:3f:44:36:e1:e9:07:3c:11:
4a:05:31:89:8f:99:1f:f3:49:49:45:74:19:4b:01:
5a:86:7f:cb:c2:d0:08:8f:c7:fd:d6:d5:f8:f2:f6:
0a:b4:e7:72:e2:8d:60:75:da:49:9b:7d:0f:cc:b3:
ff:fe:41:62:f3:b8:4a:61:20:e7:b3:3a:17:fc:91:
82:19:0a:4b:3a:5b:82:79:1f:48:f5:8e:9f:b2:1c:
eb:d4:01:c0:75:90:6c:21:46:55:06:fe:d7:07:97:
ce:dd:07:f9:c4:82:87:e6:f3:89:2a:85:74:1c:63:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:B3:04:44:5B:F9:4F:5A:B8:24:E8:BB:4A:B4:8A:B0:D7:AB:70
X509v3 Authority Key Identifier:
keyid:19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/ASqzBERb-U9auCTou0q0irDXq3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.112.0/24
195.96.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:12:41:70:d9:ed:61:0f:df:e9:dc:66:05:68:49:df:d0:89:
4d:c1:1f:6a:b3:95:93:ef:6b:36:0f:1b:67:c8:26:6b:8e:07:
86:ef:5c:e3:77:b5:3e:d2:84:d3:b5:1b:e2:5f:24:d9:3b:04:
56:55:0a:37:ed:03:45:ef:63:3f:7c:11:07:08:a1:c5:48:bb:
cc:db:01:0d:e7:c8:f9:db:ee:41:90:c7:9f:f9:55:7b:36:51:
1e:d4:e3:c3:fc:e7:4c:12:78:60:9e:6d:a7:b0:51:13:1c:a4:
93:67:b3:67:7b:7d:00:50:1a:ce:db:8a:0c:2a:5e:b1:ca:65:
f5:4f:ae:ef:c1:4e:50:a5:bd:83:78:eb:fe:21:d2:d2:9f:1e:
99:e8:24:57:49:16:d7:c2:0d:5e:9b:b3:f7:31:10:4f:d8:77:
38:4c:25:17:56:88:91:06:c4:d0:8c:cb:1e:40:4b:68:ef:1c:
a4:c6:8d:02:23:25:04:a8:61:8c:98:e4:c3:4a:7a:e6:53:5c:
59:a4:ab:d7:6a:9b:3f:18:e3:74:e3:fa:8e:00:f2:fa:72:28:
e5:aa:03:c3:0a:6b:32:26:88:18:8d:d9:c6:e8:70:2a:48:50:
a2:0c:70:7b:29:65:dd:27:ac:2b:36:b4:8f:2d:70:af:0b:17:
d6:c8:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:33 2025 by rpki-client